Effective Date: April 18, 2022

We urge you to carefully review this Privacy Statement along with the 21CasinoClub Casino Terms of Service before engaging with, accessing, or downloading any content from 21CasinoClub Casino or associated websites, applications, or platforms.

21CasinoClub Casino, a premier offering from Boyd Gaming Corporation ("Boyd Gaming"), adheres to this Privacy Statement across all its related websites, applications, and software that link here, collectively known as "the Services". This statement does not cover any Boyd Gaming website, mobile app, or product that operates under a separate privacy policy or declaration.

Within this Privacy Statement, we detail the nature of the information we collect from you, the process of collection, and the manner in which we use and, under certain conditions, share your information in the course of providing the Service(s). Should you have any inquiries, do not hesitate to contact us via email. Note that interactions with Boyd Gaming outside the scope of the Services, such as becoming a Boyd Rewards member or utilizing Boyd Gaming's website, will see your information managed according to the Boyd Gaming Privacy Statement.

Comprehensive Information Collection and Utilization Overview.

Accessing the Services can be done anonymously as a guest with only your date of birth and information described in the "Automatically Collected Information" segment below required. For Boyd Rewards members, your Boyd Rewards credentials are needed. Information collection occurs automatically upon service usage and additionally when voluntarily offered by you. Opting out of providing certain information may limit your participation in some Services.

We may further enrich our understanding of you through information obtained from public or commercial sources.

Types of Information Provided by You.

Accessing our Services is free of charge.

The range of information we may collect when you use the Services includes, but is not limited to:

• Your registration details such as date of birth, Boyd Rewards username, and password;
• Transaction details should you make a purchase (note that billing or payment details are managed by a third-party provider, though we receive transaction summaries);
• Demographics like gender and age;
• If accessing via a social network, information made visible through your social network settings;
• Details on your participation in Boyd Gaming's Boyd Rewards loyalty program, including purchases and rewards;
• Responses to contests, surveys, and other promotional activities;
• Content you share through the Services, including gameplay interactions, which, except for support tickets, is public;
• Inferences drawn from the above information and more, as detailed in this Privacy Statement;
• Your communications with us regarding the Services or this Privacy Statement.

Automatically Collected Information.

Our collection includes details of your interactions with the Services, such as gameplay data, third-party website or application interactions, device IDs, IP addresses and the derived approximate locations, browser specifics, traffic data, error reports, and more. This extensive data collection aids us in understanding service usage patterns, enhancing service quality, and tailoring our communications with you for both support and marketing purposes.

Location data, precise or approximate, may be collected with your consent and in accordance with your device or app permissions, enabling us to offer personalized experiences and notifications.

Information is also sourced from public entities, data vendors, and third-party organizations, enhancing our service offerings and user experiences.

We might aggregate or anonymize the data you provide or we collect. Such aggregated or anonymized data, no longer personally identifiable, may be utilized and shared without restriction.

For detailed information on our use of cookies and tracking technologies, please see the dedicated section below.

At present, we do not respond to browser "do-not-track" signals.

Purpose and Application of Collected Information.

The information we collect underpins our commercial and business objectives, enabling us to refine our offerings and introduce you to products or services from us, our affiliates, or third parties that might interest you. The data serves multiple purposes, including business growth, service improvement, and customer engagement.

• Diligently Providing and Continuously Improving Our Services, which encompasses activities like confirming your eligibility, ensuring accurate verification, enhancing your overall experience, and diligently resolving any service-related issues or technical errors that may arise during your use of our platform;
• Engaging in Active Communication with You, with your explicit consent where required by law, which includes informing you about upcoming products, services, events, and promotions offered by us, our affiliates, and trusted third parties, alongside providing personalized advertising and conducting satisfaction surveys or addressing any inquiries and complaints you may have;
• Empowering Our Business Through Research and Development, aiming to innovate and develop new products or services that cater to your needs, conducting thorough analytics to understand usage trends, and implementing robust measures to detect and prevent any fraudulent or malicious activity on our Services;
• Adhering to Legal and Regulatory Obligations, ensuring compliance with the laws and regulations that govern our operations, thereby upholding our commitment to operate within the legal framework;
• Vigorously Enforcing Our Legal Rights and safeguarding the privacy, safety, and security of our operations, as well as protecting the rights and properties of our affiliates, customers, and the wider community.

Comprehensive International Transfer of Your Information.

Our Services, governed from the United States, involve the storage and processing of your information across global locations where we operate or engage with service providers. This international transfer of information, including to the United States, may expose your data to jurisdictions with differing privacy protections than your home country. Be aware that in these countries, legal and security authorities may have the right to access your personal information under certain conditions.

Enhanced Access to Your Personal Information: Your Rights and Choices Explained.

You have the right to request a detailed copy of the Personal Information we hold about you, including the ability to have it updated, corrected, or deleted based on your preferences.

When making such requests, please be specific about the Personal Information you wish to access, modify, or remove. To protect your privacy and security, we will take reasonable steps to verify your identity before fulfilling your request. We aim to respond to your request efficiently, in alignment with applicable legal standards.

DIRECT CHANNELS FOR CONTACTING US

Should you have inquiries regarding this Privacy Statement or our handling of Personal Information, our dedicated team is available to assist you:

1. Via Email: [email protected], ensuring a direct and secure line of communication for any concerns or questions you might have.

IMPORTANT: Email communications, while convenient, may not always be secure. Thus, we advise against including sensitive information, such as credit card details or other personal data, in your email correspondence with us.

You have the autonomy to terminate your account with us at any point. Following account termination, we might retain certain information about you as required by law or for legitimate business purposes. In scenarios where legal obligations necessitate the retention of your personal information, deletion may not be feasible. Should you wish to terminate your account or have queries regarding your personal information, kindly reach out to us via email.

You possess the option to manage your Cookie preferences through your browser settings, allowing you to reject or accept Cookies from specific sites. Additional steps may be required to disable other forms of tracking technologies. Note that blocking Cookies may impact the performance of the Services and potentially restrict access to certain features.

Several of our third-party partners are part of the Network Advertising Initiative, offering a unified solution to opt-out of targeted advertising. For more details and to exercise your opt-out rights, please refer to the provided links. Additionally, for information on Google Analytics and your choices regarding data use, visit their site. Remember, opting out on a website may not automatically apply to mobile apps. Check your device settings and app permissions for mobile-specific opt-out instructions.

If you no longer wish to share your location data with us, you can disable this feature through your mobile device's settings for the 21CasinoClub Casino app. However, this action may affect your ability to fully utilize our Services.

Upon installing our Services on your mobile device, you can choose to receive or decline push notifications. These notifications can be managed and disabled through your device's settings for external applications.

For those registered to receive SMS messages, opting out is as simple as replying STOP to the sender's number. A confirmation message may be sent upon receiving your opt-out request for SMS messages.

If you've received an invitation to join 21CasinoClub Casino but prefer not to receive further communications, you have the option to opt out at any time by contacting us directly at the provided email address.

Expanding on Sharing Your Information.

We transparently share the categories of information outlined below with unaffiliated third parties for several justified reasons:

• Whenever you explicitly request or give us authorization to do so;
• To facilitate the completion of transactions initiated by you, ensuring a seamless service experience;
• In adherence to legal obligations, including compliance with laws, regulatory demands, court orders, or subpoenas, to uphold our Terms of Service or other agreements, and to protect the rights, property, or safety of our operations, our affiliates, our users, or others;
• As part of negotiations or arrangements involving the sale, transfer, divestiture, or disclosure of all or a portion of our business or assets. In such cases, customer information might be among the assets transferred;
• To external agents, vendors, or service providers who perform functions on our behalf, such as managing billing processes, deploying emails, conducting advertising and marketing activities, ensuring the security and integrity of our services, customer service, and other operational tasks as described herein.

Furthermore, we may share information about you with our affiliated entities to support the delivery of targeted services and communications as articulated in this Privacy Statement.

When you engage with third-party services, like social media platforms or mobile gaming leaderboards through our Services, these platforms may gather information about your activities and may inform your network about your interactions with our Services, adhering to their privacy policies.

We staunchly oppose the sale of your personal information to third parties. However, we allow third parties to collect and utilize information as described here for business purposes, including delivering interest-based advertising across various platforms and devices, based on your online behaviors over time. It's important to note that such third-party data practices are beyond the scope of our Privacy Statement.

In-Depth on Cookies and Tracking Mechanisms.

Automatic information collection occurs each time you interact with our Services. This is achieved through us or third-party service providers like Google and Apple, who utilize Cookies or similar data files stored on your devices to enhance service quality. Cookies, along with other local storage technologies, help in personalizing your service experience by remembering your preferences and session details. Our use of Cookies spans from improving service functionality to facilitating user recognition upon return visits. The information collected includes usage details and preferences, aiding in our continuous effort to refine the Services.

Selected third parties are also permitted to use Cookies on our Services to provide us with insights into user interactions, helping us to optimize and tailor our offerings effectively. These third parties might track user activities across different websites and devices to enhance the relevance of our Services.

Advertisers and ad networks employ third-party advertising technologies to target advertising more accurately across our Services and on external platforms. These technologies enable cross-device recognition, allowing ads to be more effectively delivered to you. We also use beacons to manage our online advertising, helping us understand the effectiveness of our ad campaigns.

Google Analytics is one of the third-party services we use to understand how you interact with our Services. For more information on Google Analytics and your choices regarding the processing of your information, visit their policy page.

Enhanced Data Retention, Security, and Integrity Practices.

Our commitment to safeguarding your information involves employing robust technical, administrative, and physical measures to mitigate against unauthorized access, loss, or modification. We strive to protect the information within our Services to the best of our ability, acknowledging the inherent vulnerabilities of online data transmission and storage technologies.

We advise against sharing your login details with others to prevent unauthorized access to your account information.

Considering the inherent insecurities of email and instant messaging, we urge you not to use these channels for transmitting sensitive personal information. Despite our efforts to secure your data, the nature of Internet communications means that absolute security cannot be guaranteed.

Guidance on Links to Other Sites.

While our Services may contain links to third-party websites or allow third parties to link to their services, we are not responsible for the privacy practices or content of such external sites. We encourage you to read the privacy statements of any external site you visit.

Clarifying Children's Privacy Protection.

Our Services are strictly for users who are 21 years of age or older. We do not knowingly collect personal information from minors under 21 years of age, nor do we allow them to register or use our Services. If you are under 21, we strongly advise against attempting to use our Services or providing any personal information.

If you are a parent or guardian and discover that your child under the age of 13 has provided us with personal information, please contact us immediately to request the removal of this information.

Specifying Territorial Restrictions and Consent for North American Users.

Our Services are specifically tailored for users residing in North America, with the exception of users in the State of Washington. We do not engage in collecting or soliciting personal information from users located outside of North America or within the State of Washington. If you are outside of these designated areas, we respectfully request that you refrain from accessing our Services.

Notifying Changes to the Privacy Statement.

We reserve the right to update this Privacy Statement periodically to reflect changes in our privacy practices. Such modifications will be made clear through revisions to the "Current as of" date and publication of the updated statement. We encourage regular review of our Privacy Statement to stay informed about how we protect your information.

Expanding Additional Jurisdictional Rights

Detailed Disclosures of Personal Information

As part of our operational business activities, we disclosed specific categories of Personal Information to third parties, outlined as follows:

Nevada Residents: Special Provisions.

For residents of Nevada, we affirm our commitment to not sell Covered Information as defined under Nevada law. For inquiries or clarifications, please reach out to us via email.